aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorintrigeri <intrigeri@boum.org>2011-05-26 17:00:42 +0200
committerintrigeri <intrigeri@boum.org>2011-05-26 17:01:06 +0200
commite7855fddd9b2840f4e7ad960100e2db90ffce779 (patch)
tree63dfe1002ccab1831487ea975589d263a31242de
parent72f72e211e3cefcbb1a6f229e8f893a1f62b3a4d (diff)
downloadikiwiki-e7855fddd9b2840f4e7ad960100e2db90ffce779.tar
ikiwiki-e7855fddd9b2840f4e7ad960100e2db90ffce779.tar.gz
Bug report (with security implications) + patch.
-rw-r--r--doc/bugs/po:_po4a_too_strict_on_html_pages.mdwn16
1 files changed, 16 insertions, 0 deletions
diff --git a/doc/bugs/po:_po4a_too_strict_on_html_pages.mdwn b/doc/bugs/po:_po4a_too_strict_on_html_pages.mdwn
new file mode 100644
index 000000000..20584e4f4
--- /dev/null
+++ b/doc/bugs/po:_po4a_too_strict_on_html_pages.mdwn
@@ -0,0 +1,16 @@
+On some source .html pages, po4a wrongly detects a malformed document,
+which makes the po plugin error out and the wiki build is aborted.
+
+I've pushed a [[patch]] to my `po` branch to fix this: it makes po4a
+warn, instead of error'ing out, when it detects a malformed input
+document.
+
+This is really a po4a bug which I will report, but since most ikiwiki
+users are gonna live with Squeeze's po4a for a while, I think we
+should workaround it in ikiwiki.
+
+Also, the current state of things makes it a bit too easy to break a
+given ikiwiki site build (DoS) when both the html and po plugins are
+enabled: inserting a html tag without closing it is enough.
+
+--[[intrigeri]]